CloudBees action: Scan with Grype

Use this action to perform static application security testing (SAST) on a repository with the Grype scanner.

Inputs

Table 1. Input details

Input name	Data type	Required?	Description
binary-tar-path	String	Yes	Specify the path of the binary that should be scanned.

Usage example

In your YAML file, add:

      - name: Scan with Grype
        uses: https://github.com/cloudbees-io/grype-plugin@v1
        with:
          binary-tar-path: tar file path that needs to be scanned

License

This code is made available under the MIT license.

References

• Learn more about using actions in CloudBees workflows.

• Learn about the CloudBees platform.